This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer File: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer (raw, json) Hash identifier: qCxKghjz7I0zzqFPupSTsJErrFAIFyzdneQaX9OCZA8= Subject key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ADF39CBE14237631F80BF7EC34A2A8310 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 02 Dec 2025 13:21:38 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 207728 IP: 31.10.5.0/24 IP: 31.210.170.0 -- 31.210.173.255 IP: 46.28.234.0/24 IP: 62.204.42.0/24 IP: 85.136.180.0/22 IP: 87.236.177.0/24 IP: 93.88.74.0/23 IP: 93.188.155.0/24 IP: 103.65.230.0/23 IP: 104.192.42.0/24 IP: 138.226.220.0/22 IP: 148.227.170.0/24 IP: 185.162.8.0/22 IP: 185.204.52.0/22 IP: 194.146.127.0/24 IP: 2a12:9cc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:39:cb:e1:42:37:63:1f:80:bf:7e:c3:4a:2a:83:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 2 13:21:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=149d1f67a41ca2e405017cbe48bafff1733e3869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:01:37:64:72:6a:5c:34:48:1e:9e:a1:7f:76: a6:b9:98:0b:d4:15:c4:2a:45:c0:0e:b7:20:c2:7c: 9a:22:3a:31:42:c2:ef:8a:ac:c9:7d:45:ce:a7:b0: f9:33:b5:1e:05:ee:65:cb:d8:3c:3a:3d:c5:8a:58: be:c5:02:cd:5b:1e:79:16:5e:cc:ee:69:da:9a:f1: 00:66:87:4a:fb:c6:ec:e3:14:a4:8a:b5:41:a9:a0: f1:aa:e2:90:eb:ca:b7:d3:d3:ab:d7:74:08:80:6d: 30:e5:60:94:11:dd:dc:61:ba:66:5f:58:8c:40:d5: b5:12:cc:fe:31:58:ce:5d:56:cf:b4:b5:ab:b7:6f: f4:19:7f:ff:1c:01:31:5c:23:7e:a4:c6:04:b6:9d: b0:7e:4b:e7:17:f9:50:05:b3:1f:12:50:84:c8:f6: 04:dd:c9:f2:26:72:33:e8:38:b0:d2:eb:cd:86:f2: d8:98:ee:86:20:52:ac:82:27:d1:1c:1b:ca:65:24: 49:1f:8f:cc:e5:55:a6:e8:fa:8f:49:48:d5:ee:2d: 15:f5:c2:97:ba:44:97:46:e2:e4:1b:f8:61:c2:93: 92:f7:ef:d6:09:01:f8:dc:4d:a7:3a:94:7e:ea:d6: 37:3e:37:e2:52:60:0e:96:c2:d1:a8:b6:24:42:3e: d3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.10.5.0/24 31.210.170.0-31.210.173.255 46.28.234.0/24 62.204.42.0/24 85.136.180.0/22 87.236.177.0/24 93.88.74.0/23 93.188.155.0/24 103.65.230.0/23 104.192.42.0/24 138.226.220.0/22 148.227.170.0/24 185.162.8.0/22 185.204.52.0/22 194.146.127.0/24 IPv6: 2a12:9cc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207728 Signature Algorithm: sha256WithRSAEncryption 51:df:2b:a5:44:da:8d:c9:ae:22:05:8c:2c:1d:29:28:b8:a7: 24:c4:c6:82:70:5a:ea:09:c3:53:b1:f1:4b:ab:9e:52:42:1d: 09:58:7e:5c:71:f3:48:c1:f7:54:ca:8a:29:be:be:bf:7f:83: 93:b8:af:a8:df:ff:91:14:15:d6:5b:84:e4:38:62:76:8a:0a: 7d:d5:59:f5:43:7e:ad:b4:37:dd:7b:1d:23:88:29:a9:9d:2b: de:53:85:e4:58:71:73:ef:e5:b7:99:1d:ad:a5:de:2a:dd:53: b1:43:6e:00:6e:08:73:d4:69:31:e1:ec:fd:87:8a:ec:aa:46: b5:e4:8b:7a:0b:77:26:2b:29:d4:7c:1f:39:9a:cd:a1:74:2f: 8b:42:4b:19:e7:ae:eb:20:a0:55:c8:7b:6f:38:ea:a1:9b:b9: f4:32:a8:f3:9c:d4:e4:50:e0:80:72:95:36:44:3c:8d:1c:9d: 8e:22:f7:e1:cf:5b:55:3d:fd:c1:5d:0e:df:ad:e0:c9:b0:72: 97:18:33:4e:10:0a:c1:fe:25:3a:9d:d7:a3:4c:eb:07:c9:fc: 56:de:05:28:fa:51:e5:9d:b5:ab:54:4c:5a:33:45:d9:0f:11: 42:7c:08:46:e8:1b:d3:01:eb:97:fd:c1:18:3f:02:4a:9a:9a: ea:d3:2b:1e -----BEGIN CERTIFICATE----- MIIGADCCBOigAwIBAgISAZrfOcvhQjdjH4C/fsNKKoMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAyMTMyMTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDlkMWY2N2E0MWNhMmU0MDUwMTdjYmU0OGJhZmZmMTczM2UzODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wE3ZHJqXDRIHp6hf3amuZgL1BXE KkXADrcgwnyaIjoxQsLviqzJfUXOp7D5M7UeBe5ly9g8Oj3Fili+xQLNWx55Fl7M 7mnamvEAZodK+8bs4xSkirVBqaDxquKQ68q309Or13QIgG0w5WCUEd3cYbpmX1iM QNW1Esz+MVjOXVbPtLWrt2/0GX//HAExXCN+pMYEtp2wfkvnF/lQBbMfElCEyPYE 3cnyJnIz6Diw0uvNhvLYmO6GIFKsgifRHBvKZSRJH4/M5VWm6PqPSUjV7i0V9cKX ukSXRuLkG/hhwpOS9+/WCQH43E2nOpR+6tY3PjfiUmAOlsLRqLYkQj7T0wIDAQAB o4IDDDCCAwgwHQYDVR0OBBYEFBSdH2ekHKLkBQF8vki6//FzPjhpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlL2I1MDkw YS1lYzU4LTQ2ZGItOWRkOS01NDg1NjgyYTA1ZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvYjUwOTBh LWVjNTgtNDZkYi05ZGQ5LTU0ODU2ODJhMDVmNS8xL0ZKMGZaNlFjb3VRRkFYeS1T THJfOFhNLU9Hay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGKBggrBgEF BQcBBwEB/wR7MHkwaAQCAAEwYgMEAB8KBTAMAwQBH9KqAwQBH9KsAwQALhzqAwQA PswqAwQCVYi0AwQAV+yxAwQBXVhKAwQAXbybAwQBZ0HmAwQAaMAqAwQCiuLcAwQA lOOqAwQCuaIIAwQCucw0AwQAwpJ/MA0EAgACMAcDBQMqEpzAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwMrcDANBgkqhkiG9w0BAQsFAAOCAQEAUd8rpUTajcmuIgWM LB0pKLinJMTGgnBa6gnDU7HxS6ueUkIdCVh+XHHzSMH3VMqKKb6+v3+Dk7ivqN// kRQV1luE5DhidooKfdVZ9UN+rbQ33XsdI4gpqZ0r3lOF5Fhxc+/lt5kdraXeKt1T sUNuAG4Ic9RpMeHs/YeK7KpGteSLegt3Jisp1HwfOZrNoXQvi0JLGeeu6yCgVch7 bzjqoZu59DKo85zU5FDggHKVNkQ8jRydjiL34c9bVT39wV0O363gybBylxgzThAK wf4lOp3Xo0zrB8n8Vt4FKPpR5Z21q1RMWjNF2Q8RQnwIRugb0wHrl/3BGD8CSpqa 6tMrHg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:55:01 2025 by rpki-client